4e80d12316bb6e44f539db9ba94fe5c2927f81ee0b9b6f29a3c567f456e013af

General

Target

4e80d12316bb6e44f539db9ba94fe5c2927f81ee0b9b6f29a3c567f456e013af
Size

252KB
MD5

591e7d81a3d131d03a82d6fda527fe50
SHA1

7bcd58b968d2c2b364cf05a67f88b2c411f8f5f3
SHA256

4e80d12316bb6e44f539db9ba94fe5c2927f81ee0b9b6f29a3c567f456e013af
SHA512

b0b598fe312fd3a15017e1a20a916475bb75e83cdba35ef5dd278256389006ca46d5cb9be241ada945b2aa74dee0eca1b041819da3a54efae9905ec6d90eacfd
SSDEEP

6144:Etf1TDcAHEOXTCRgGm9p9Q/StIPtAmN3wxGrO7UBML2omb0I:WTDhHBjCjR/S6tN3wxGC7UBs2omb

Score

N/A

Malware Config

Signatures

Files

4e80d12316bb6e44f539db9ba94fe5c2927f81ee0b9b6f29a3c567f456e013af
.exe windows x86

031da197642f113dc44e1ef0ed02daec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetExitCodeProcess
GetFullPathNameA
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTempPathA
GetVersionExA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetHandleInformation
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject
WideCharToMultiByte

msvcrt

_close
_fdopen
_getpid
_open
_putenv
_read
_stat
_strdup
_unlink
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_access
_cexit
_close
_errno
_flsbuf
_get_osfhandle
_iob
_isctype
_onexit
_open
_pctype
_pipe
_read
_setmode
_stricmp
abort
atexit
calloc
exit
fclose
fflush
fopen
fprintf
fputc
fread
free
freopen
fseek
ftell
fwrite
getenv
localeconv
malloc
memcmp
memcpy
memmove
memset
qsort
raise
realloc
remove
signal
sprintf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncpy
strpbrk
strrchr
strstr
tolower
wcslen

user32

CharLowerBuffA

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

031da197642f113dc44e1ef0ed02daec

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 110KB - Virtual size: 110KB

.data Size: 2KB - Virtual size: 1KB

.rdata Size: 109KB - Virtual size: 109KB

.bss Size: - Virtual size: 7KB

.idata Size: 29KB - Virtual size: 30KB

.text
Size: 110KB - Virtual size: 110KB

.data
Size: 2KB - Virtual size: 1KB

.rdata
Size: 109KB - Virtual size: 109KB

.bss
Size: - Virtual size: 7KB

.idata
Size: 29KB - Virtual size: 30KB